General
- Target 2026-07-10_02d1a538107e81318209c3e02f7a6ee6_coinminer_elex_glassworm_icedid_medusalocker_njrat_revil_vidar_zxxz
- Size 31.0MB
- Sample260711-acf6lsax2s
- SHA256 262e156a7d0ab35dec71b7e0f518d3b59e13ec5496bb87515fa5b6f85bdddb93
- MD5 02d1a538107e81318209c3e02f7a6ee6
- SHA1 244619bd5d15e4cccb4160ff0b936bebe32c5763
- SHA512 89aa538d56abc779c2f3fb4558e4f9b010ea831f40d083a7893adc026e329c4fed720c50f9486efec86388394a63b0312cf352d8b144c719c4a72663ab106cb2
- SSDEEP 393216:0m+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDlk2sNWcxbQx0I:0m+GCl3WNWcFk
- TLSH T1C0679D1373E50595E4B7D2388AA74203E773B86757318ACF326D02152FBBAD09A7E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_02d1a538107e81318209c3e02f7a6ee6_coinminer_elex_glassworm_icedid_medusalocker_njrat_revil_vidar_zxxz.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_02d1a538107e81318209c3e02f7a6ee6_coinminer_elex_glassworm_icedid_medusalocker_njrat_revil_vidar_zxxz.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_02d1a538107e81318209c3e02f7a6ee6_coinminer_elex_glassworm_icedid_medusalocker_njrat_revil_vidar_zxxz
- Size 31.0MB
- SHA256 262e156a7d0ab35dec71b7e0f518d3b59e13ec5496bb87515fa5b6f85bdddb93
- MD5 02d1a538107e81318209c3e02f7a6ee6
- SHA1 244619bd5d15e4cccb4160ff0b936bebe32c5763
- SHA512 89aa538d56abc779c2f3fb4558e4f9b010ea831f40d083a7893adc026e329c4fed720c50f9486efec86388394a63b0312cf352d8b144c719c4a72663ab106cb2
- SSDEEP 393216:0m+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDlk2sNWcxbQx0I:0m+GCl3WNWcFk
- TLSH T1C0679D1373E50595E4B7D2388AA74203E773B86757318ACF326D02152FBBAD09A7E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist